ASSOCIATED DRATA CONTROL
This test is part of the System Monitoring control (DCF-86) that ensures production systems and resources are monitored and automated alerts are sent out personnel based on pre-configured rules. Events are triaged to determine if they constitute an incident and escalated per policy if necessary.
WHAT TO DO IF A TEST FAILS
If Drata finds that one or more AWS database clusters or instances do not have a CloudWatch metric alarm for writes I/O configured with a subscription to an SNS topic, the test will fail.
STEPS TO REMEDIATE
Sign in to CloudWatch console.
Create an alarm by selecting 'Alarm' then 'Create alarm' from the navigation panel.
Click 'select metric' > 'RDS' > 'Per-Cluster Metrics' and select your DB cluster or instance identifier then select 'WriteIOPS' metric.
Specify conditions by setting threshold type, defining threshold value, setting the period, and setting the evaluation periods.
Choose an existing SNS topic or create a new one to subscribe to.
Give your alarm a name, review your settings, and finish creating the alarm.
Repeat for each failing DB instance or cluster